DATA PROTECTION INFORMATION FOR THE PROCESSING OF MANDATES
Dear client or interested party, below you will find legally required information on the processing of your personal data provided to us:
1. name and contact details of the controller and the company data protection officer
1. Controller within the meaning of the data protection laws (Art. 4(7) GDPR) is:
HUBIT Datenschutz GmbH & Co. KG
Lise-Meitner-Str. 2
28359 Bremen
E-Mail-Adresse: info@hubit.de
Webseite: www.hubit-datenschutz.de
Datenschutz-Telefon: 0421-33114300
2. nature and purpose of the processing and legal basis for the processing
When you mandate us, we collect the following information in particular:
- Client master data (name, address, telephone number, e-mail address);
- contact person data, if applicable;
- Information that is necessary for the assertion and defense of your rights within the scope of the mandate.
We collect and use the data for the purpose of executing the client relationship, for example to provide you with appropriate legal advice and representation, for correspondence with you and for invoicing.
If you provide us with further data as part of the client relationship, we will also only process this data for the purpose of performing the mandate.
The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR, as the processing of the data is necessary for the appropriate handling of the mandate and for the mutual fulfillment of obligations arising from the mandate agreement.
3. disclosure of data to third parties
a) Your data is treated as strictly confidential in our company and is protected against unauthorized access. In our company, only a strictly limited group of employees has access to your data, who process this data in the context of handling the mandate.
b) We are also supported by service providers as processors who provide IT services and hosting services for us. As part of these services, the processors may have access to personal data. These processors process the data on our behalf and exclusively in accordance with our instructions. In this case, we are legally responsible for appropriate data protection precautions at the companies commissioned by us. The companies have been carefully selected by us, commissioned in writing in accordance with the legal requirements, are bound by our instructions and are regularly monitored. Data is not transferred to third countries.
c) Your data will be passed on to other recipients (third parties) insofar as this is necessary for the processing of client relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. This includes in particular the disclosure to opposing parties and their representatives (in particular their lawyers) as well as courts and other public authorities for the purpose of correspondence and for the assertion and defense of your rights. The data passed on may only be used by the third party for the stated purposes.
Legal and notarial confidentiality remain unaffected. Insofar as data is concerned that is subject to legal and/or notarial confidentiality, it will only be passed on to third parties in consultation with you.
Otherwise, we do not intend to pass on your data to third parties and will not do so unless you expressly give us your consent to do so or we are obliged or entitled to do so under applicable legal provisions irrespective of your consent. Such a case could exist, for example, if it were necessary to disclose data to a court or authority in order to assert, exercise or defend legal claims.
Storage period
The personal data collected by us for the mandate will be stored until the end of the statutory retention period for lawyers (6 years after the end of the calendar year in which the mandate was terminated) and notaries (100 years for the register of deeds, register of inheritance contracts, list of names for the register of deeds and collection of deeds including inheritance contracts stored separately, 30 years for the custody ledger, mass ledger, list of names for the mass ledger, escrow account list, general files, generally 7 years for ancillary files and 5 years for collections for bill of exchange and cheque protests) and then deleted, unless we are entitled to do so in accordance with Article 6 para. 1 sentence 1 lit. c GDPR due to retention and documentation obligations under tax and commercial law (from HGB, StGB or AO), you have consented to storage for a longer period in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR.
para. 1 sentence 1 lit. a GDPR or storage beyond this is otherwise legally permissible.
Exercising the rights of data subjects
a) You have the right:
- in accordance with Art. 7 para. 3 GDPR, to withdraw your consent given to us at any time. The consequence of this is that we may no longer continue the data processing for the future, insofar as this was based on the consent;
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- You shall have the right pursuant to Art. 16 GDPR to demand the rectification of inaccurate or the completion of your personal data stored by us without undue delay.
- This shall not apply to the extent that processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
- You shall have the right pursuant to Art. 20 GDPR to receive your data which you have provided to us in a structured, commonly used and machine-readable format or to obtain the transmission to another controller.
b) To assert these rights or obtain additional information about them, please contact us. For example, an e-mail to the contact address of our data protection officer at datenschutz@bdr-legal.de.
Moreover, you shall have the right pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. For example, you can therefor contact the supervisory authority in your habitual residence or place of work or where we are established. You will find a list of the supervisory authorities here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
6. right of objection
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation.
If you would like to exercise your right to object, simply send an e-mail to our data protection officer, for example
HUBIT Datenschutz GmbH & Co. KG
Lise-Meitner-Str. 2
28359 Bremen
E-Mail-Adresse: info@hubit.de
Webseite: www.hubit-datenschutz.de
Datenschutz-Telefon: 0421-33114300
Blaum Dettmers Rabstein Rechtsanwaltspartnerschaft mbB